Dear User, thank you for visiting our website. Below, we describe how we manage the website with regard to the processing of personal data of users who visit it.
WHY THIS NOTICE?
This information is provided pursuant to Art. 13 of Legislative Decree no. 196/03 (Personal Data Protection Code) and Art. 13 and 14 of European Regulation 679/2016 (hereinafter also "GDPR") to those who interact with the web services provided directly by the Company. This information applies to this site and not to other websites that may be accessed via links. This information is based on Recommendation No. 2/2001, which the European data protection authorities, within the Working Party established by Art. 29 of Directive No. 95/46/EC, adopted on May 17, 2001, to identify minimum requirements for the collection of personal data online, and, in particular, the methods, timing, and nature of the information that data controllers must provide to users when they connect to web pages, regardless of the purpose of the connection. We therefore invite you to review our Privacy Policy, outlined below. The Policy and Privacy Standards used to protect personal data are based on the following principles:
Data Controller
The data controller is the Company whose contact details are indicated in the footer of this site.
PRINCIPLE OF RESPONSIBILITY
The processing of personal data is managed over time by managers identified within the company organization.
PRINCIPLE OF TRANSPARENCY
Personal data is collected and subsequently processed according to the principles expressed in this Privacy Policy. Upon provision of data, the interested party will be provided with a concise but comprehensive information notice, in accordance with Article 13 of Legislative Decree no. 196/03 and Articles 13 and 14 of the GDPR.
PRINCIPLE OF RELEVANCE OF THE COLLECTION
Personal data is processed lawfully and fairly; it is recorded for specific, explicit, and legitimate purposes; it is relevant and not excessive for the purposes of the processing; and it is retained for the time necessary for the purposes of collection.
PRINCIPLE OF PURPOSE OF USE
The purposes of personal data processing are disclosed to data subjects at the time of collection. Any new data processing, if unrelated to the stated purposes, is initiated after providing the data subject with a new notice and requesting their consent, where required by Legislative Decree no. 196/03 and the GDPR. In any case, personal data will not be disclosed to third parties or disseminated without the data subject's prior consent, except in the cases expressly indicated in Article 24 of Legislative Decree no. 196/03 and the GDPR.
PRINCIPLE OF VERIFIABILITY
Personal data is accurate and updated over time. It is also organized and stored in such a way that the interested party can, if they wish, know what data has been collected and recorded, as well as monitor its quality and request its correction, addition, or deletion due to violation of the law or objection to its processing. They can also exercise all other rights, pursuant to and within the limits of Article 7 of Legislative Decree no. 196/03 and Articles 15 et seq. of the GDPR, at the addresses indicated in the information pursuant to Article 13 of Legislative Decree no. 196/03 and Articles 13 and 14 of the GDPR on the Company's website.
SAFETY PRINCIPLE
Personal data is protected by technical, IT, organizational, logistical, and procedural security measures against the risk of destruction or loss, even accidental, and unauthorized access or unauthorized processing. These measures are updated periodically based on technical progress, the nature of the data, and the specific characteristics of the processing, and are constantly monitored and verified over time. Third parties who perform support activities of any kind for the provision of the services requested by the Company, in connection with which they process personal data, are designated by the latter as Data Processors and are contractually bound to comply with the security and confidentiality measures for processing. The identity of these third parties is disclosed to users. Furthermore, the Company assumes no responsibility for: the rules and methods of personal data management of other websites accessible from our pages through links and references; the content of any email services, web spaces, and chat forums provided to users. The processing operations related to the web services offered by this site take place at the Company's premises, and possibly at the Data Controllers' offices, and are handled by data processors responsible for managing the requested services, marketing activities – where requested by the user – data storage activities, and occasional maintenance operations.
SCOPE OF DATA COMMUNICATION
The personal data provided may be disclosed to third parties to comply with legal obligations, execute orders from authorized public authorities, or to assert or defend a right in court. If necessary in relation to specific services or products requested, personal data may be disclosed to third parties who, as independent data controllers, perform functions strictly related and instrumental to the provision of the services or products. Without disclosure, these services and products could not be provided. Personal data will not be disclosed unless specifically required for the requested service.
DATA PROVIDED VOLUNTARILY BY THE USER
The types of personal data collected and processed on this site are those necessary to provide the various services provided. The data collected is processed using paper, automated, and electronic means, and with methods strictly related to the purposes of the processing. Your telephone number and email address may also be used to provide you with services. Therefore, if you do not provide this data, we will not be able to provide you with services that require the use of these tools. Any voluntary sending of emails to the addresses indicated on the site entails the acquisition of the sender's address as well as any other information contained in the message; this personal data will be used solely to perform the requested service or performance.
NAVIGATION DATA
It is useful to know that the website's software procedures acquire, during their normal operation, some personal data whose transmission is implicit in the use of internet communication protocols. While this information is not intended to be associated with identified users, by its nature, if combined with other data held by third parties (e.g., your internet service provider), it could allow users to be identified. This category of data includes the IP addresses or domain names of computers used by users connecting to the website, the URL (Uniform Resource Locator) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.), and other parameters relating to the user's operating system and computer environment. This data is used solely for anonymous statistics on website usage and to verify its proper functioning. The Data Controller and, depending on the requested service, the designated Data Processors retain, for a limited period in accordance with the law, the log of connections/browsing activities performed in order to respond to any requests from judicial authorities or other public bodies authorized to request such logs to ascertain potential liability in the event of computer crimes. Aside from what is specified for browsing data, the user is free to provide or withhold the personal data requested in the registration form for the services. However, on this form, some data may be marked as mandatory; it is understood that such data is necessary to provide the requested service. If this data is not provided, the requested service cannot be provided. Upon provision of data, pursuant to art. 13 of Legislative Decree no. 196/03 and art. Pursuant to Articles 13 and 14 of the GDPR, the interested party is provided with concise yet complete and transparent information regarding the purposes and methods of processing, the mandatory or optional nature of providing data, the consequences of failure to provide such data, the subjects or categories of subjects to whom personal data may be disclosed and the scope of dissemination of such data, the rights under Article 7 of Legislative Decree no. 196/03 and Article 15 et seq. of the GDPR (access, integration, updating, correction, deletion due to violation of the law, objection to processing, etc.), and the identity and location of the Data Controller and Data Processors. The interested party is therefore required to provide informed, freely given consent, expressed in a specific and documented form in the manner required by law, where required by law.If personal data is provided at a later stage, additional information may be provided to the previously provided disclosures and new consents for processing as required by the Privacy Code and the GDPR may be requested.
SECURITY MEASURES ADOPTED TO PROTECT COLLECTED DATA
The Company uses secure architectures and technologies to protect personal data from unauthorized disclosure, alteration, or improper use. The protections implemented for personal data are specifically designed to minimize the risk of destruction or loss, even accidental, of data, unauthorized access, or processing that is unauthorized or inconsistent with the purposes for which it was collected. These security measures obviously meet the minimum requirements set by the Legislator (Technical Specifications for Minimum Security Measures pursuant to Articles 33 to 36 of Legislative Decree No. 196/03). Data subjects have the right at any time to obtain confirmation of the existence or otherwise of their personal data and to know its content and origin, verify its accuracy, or request its integration, updating, or rectification (Article 7 of Legislative Decree No. 196/03 and Article 16 of the GDPR). Pursuant to the same article, the interested party has the right to request the deletion, anonymization, or blocking of data processed in violation of the law, as well as to object, in any case, for legitimate reasons, to their processing. Requests should be sent to the Company's contact details listed in the website footer.